Last updated
Pret-a-Portrait: Cybersecurity Incident
Pret-a-Portrait, a school photography contractor, reported theft of a camera bag containing SD memory cards holding pupil photos and QR-coded class/name data after a vehicle break-in at its UK operations. The company took files offline, changed access IDs, altered procedures to wipe SD cards after each job, and reported to police and the ICO.
Source: The Register
- What happened
- Pret-a-Portrait, a school photography contractor, reported theft of a camera bag containing SD memory cards holding pupil photos and QR-coded class/name data after a vehicle break-in at its UK operations. The company took files offline, changed access IDs, altered procedures to wipe SD cards after each job, and reported to police and the ICO.
- Who
- Pret-a-Portrait · UK
- When
- 2026-10-16
- Source
- The Register
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For Pret-a-Portrait in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: Backdrop: a 109 (Hot) Talent Market Index (up 7.3 on the month) with EMEA activity easing (-3.1pts).
Pret-a-Portrait: 1 signal in the last 90 days.
MitchelLake in this thematic
More signals across EMEA
Cybersecurity Incident · EMEA
UK Biobank →UK Biobank suffered a data breach in April in which records for all 500,000 volunteers were listed for sale on Alibaba. Its Research Analysis Platform has been locked out to over 20,000 researchers while it rebuilds security, with a phased reopening pending approvals.
Cybersecurity Incident · EMEA
University of Copenhagen →University of Copenhagen confirmed hackers accessed one of its test environments holding personal data of about 525,000 people.
Cybersecurity Incident · EMEA
Rand Mutual Assurance →Rand Mutual Assurance (RMA), the insurer handling injury claims for mineworkers and metalworkers, is investigating an alleged theft of 1.68 million claim records. A hacker claims to hold 366GB of its data.
Cybersecurity Incident · EMEA
Presidency of South Africa →The South African presidency pulled its website offline two days after the PHP project released fixes for critical flaws, pointing to a security exposure tied to the global PHP vulnerability scramble.
Cybersecurity Incident · EMEA
Anomaly →Security flaw in OpenCode AI coding agent (by Anomaly) let a malicious or hijacked MCP server execute code on developers' Windows and WSL machines at sign-in. Fixed in version 1.18.33.
Cybersecurity Incident · EMEA
Bureau of Public Enterprises →Nigeria's Bureau of Public Enterprises (BPE) exposed its website backups online for several days, a data-exposure security failure at a named government agency.
Where this lands in our work
- Executive Search: EMEA →
Our EMEA practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗